copycat-market-research
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python scripts to perform data processing, validation, and report generation. The
scripts/product_profile.pyentry point invokes the CLI inscripts/copycat_product_profile/cli.pyto handleinit,validate, andportfoliocommands. These scripts operate on local JSON files within the workspace and do not invoke arbitrary shell commands or external binaries. - [DATA_PROCESSING]: The logic in
scripts/copycat_product_profile/profile.pyinvolves parsing JSON data, validating it against a schema, and writing formatted Markdown tables. It uses an atomic write pattern withtempfile.NamedTemporaryFileto ensure data integrity during file operations. - [NO_CODE_INJECTION]: The skill uses static templates for Markdown generation and performs standard dictionary lookups for JSON data. No dynamic code evaluation (e.g.,
eval,exec) or unsafe deserialization (e.g.,pickle) was detected. - [SAFE_PRACTICES]: The skill follows best practices for market research agents by instructing the agent to resolve official domains using developer metadata and to verify claims using multiple evidence classes (e.g.,
official_claim,user_validated).
Audit Metadata